• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Unofficial E2guardian package for pfSense

Scheduled Pinned Locked Moved Cache/Proxy
1.2k Posts 71 Posters 1.5m Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R
    reza3sw @pfsensation
    last edited by reza3sw Sep 4, 2018, 11:57 AM Sep 4, 2018, 11:02 AM

    @pfsensation Yes I do
    But E2Guardian uses default gateway

    یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

    نهج البلاغه

    1 Reply Last reply Reply Quote 0
    • R
      reza3sw @pfsensation
      last edited by Sep 4, 2018, 1:26 PM

      @pfsensation I checked with (DNS over TLS) step by step

      https://www.netgate.com/blog/dns-over-tls-with-pfsense.html

      This does not work

      یاد کنید مرگ را، در هم کوبنده لذات و تیره و تلخ کننده شهوات را

      نهج البلاغه

      P 1 Reply Last reply Sep 4, 2018, 1:34 PM Reply Quote 0
      • P
        pfsensation @reza3sw
        last edited by Sep 4, 2018, 1:34 PM

        @reza3sw Those steps worked perfectly fine for me. You must have something else conflicting or blocking it.

        1 Reply Last reply Reply Quote 1
        • G
          genesislubrigas
          last edited by Sep 7, 2018, 2:23 AM

          How to use lightsquid for e2guardian ?

          1 Reply Last reply Reply Quote 0
          • U
            ucribrahim
            last edited by ucribrahim Sep 7, 2018, 6:28 PM Sep 7, 2018, 10:56 AM

            I worked successfully Squid + E2guardian + Lightsquid. If it's works stabil, I'll write blog post about how to make them work together as soon as fast in my website. I can see HTTP and HTTPS domains in Lightsquid report and more.

            ” Online pfSense Firewall & Router Eğitimi | www.udemy.com/pfsense-training “

            G 1 Reply Last reply Sep 8, 2018, 11:16 AM Reply Quote 0
            • S
              susamlicubuk
              last edited by Sep 7, 2018, 5:50 PM

              ibrahim lightsquid kurulumundan sonra sadece aşağıdaki kodu çalıştırman ve pf i yeniden başlatman yeterli.
              fetch -o /usr/local/pkg/lightsquid.inc http://e-sac.siteseguro.ws/lightsquid/inc.txt

              U 1 Reply Last reply Sep 13, 2018, 6:14 AM Reply Quote 0
              • U
                ucribrahim
                last edited by ucribrahim Sep 7, 2018, 6:24 PM Sep 7, 2018, 6:24 PM

                Hmm, ben onu sadece E2guardian tek başına çalıştığında, bu patch uygulanıyor sanıyorum 'ki öyle. Çünkü forumlarda öyle yazıyor. Yarın denerim sana yazarım geri.

                ” Online pfSense Firewall & Router Eğitimi | www.udemy.com/pfsense-training “

                1 Reply Last reply Reply Quote 0
                • G
                  genesislubrigas @ucribrahim
                  last edited by Sep 8, 2018, 11:16 AM

                  @ucribrahim

                  Only e2guardian and lightsquid.

                  U 1 Reply Last reply Sep 8, 2018, 12:19 PM Reply Quote 0
                  • U
                    ucribrahim @genesislubrigas
                    last edited by Sep 8, 2018, 12:19 PM

                    @genesislubrigas After you used the following code. Lightsquid can be worked with Squid + E2guardian without problem. After you used command, please restart your pfsense.

                    fetch -o /usr/local/pkg/lightsquid.inc http://e-sac.siteseguro.ws/lightsquid/inc.txt

                    ” Online pfSense Firewall & Router Eğitimi | www.udemy.com/pfsense-training “

                    G 1 Reply Last reply Sep 9, 2018, 8:01 AM Reply Quote 0
                    • G
                      genesislubrigas @ucribrahim
                      last edited by Sep 9, 2018, 8:01 AM

                      @ucribrahim

                      Yes but i dont use squid, I only use e2guardian. How do you use squid with e2guardian?

                      P 1 Reply Last reply Sep 9, 2018, 9:15 AM Reply Quote 0
                      • P
                        pfsensation @genesislubrigas
                        last edited by Sep 9, 2018, 9:15 AM

                        @genesislubrigas There's no need for you to use Squid with E2 Guardian. You can still get stats with Light squid.

                        I personally stopped using Squid because I've found it to slow down my Web traffic, instead of helping speed it up.

                        R 1 Reply Last reply Sep 11, 2018, 4:00 AM Reply Quote 0
                        • R
                          ravegen @pfsensation
                          last edited by Sep 11, 2018, 4:00 AM

                          @pfsensation said in Unofficial E2guardian package for pfSense:

                          @genesislubrigas There's no need for you to use Squid with E2 Guardian. You can still get stats with Light squid.

                          How do you get stats with Light squid ? Can you kindly assist. Thanks

                          R 1 Reply Last reply Sep 13, 2018, 6:00 AM Reply Quote 0
                          • K
                            kenpachizaraki
                            last edited by Sep 12, 2018, 6:55 AM

                            Hi everyone,
                            Hope some could assist.
                            Already got a working pfsense + e2guardian setup.
                            I would like to achieve time base blocking on some sites.

                            e.g.
                            block facebook from 8am-6pm daily
                            after 6pm it should be accessible.

                            This is my web config

                            alt text

                            Result was im stil unable to access facebook even after 6pm.

                            P 1 Reply Last reply Sep 12, 2018, 7:04 AM Reply Quote 0
                            • P
                              pfsensation @kenpachizaraki
                              last edited by pfsensation Sep 12, 2018, 7:05 AM Sep 12, 2018, 7:04 AM

                              @kenpachizaraki Create a schedule on pfSense for the duration you'd like Facebook blocked for. Then go into E2 Guardian, ACL then create a new site list config.

                              Select the schedule you've created in the site list config, and then under banned sites box. Put in Facebook.com, then just assign the ACL to a group and it should work.

                              These should be the steps to get it correctly setup. If the blocking still goes on after your assigned schedule. You may have not created a separate ACL or properly created the schedule.

                              1 Reply Last reply Reply Quote 0
                              • K
                                kenpachizaraki
                                last edited by kenpachizaraki Sep 12, 2018, 7:49 AM Sep 12, 2018, 7:48 AM

                                @pfsensation thanks for the quick reply, appreciate it.

                                Below are the steps i followed.

                                1. create schedule in pfsense
                                  --- working_hours Mon - Sun / 9:00-17:59
                                2. create ACL in e2g
                                  --- schedule : working_hours
                                  --- enable : check
                                  --- Include : social_network domains
                                  --- save

                                e2g Groups
                                --- site : working_hours
                                --- save

                                e2g IPs
                                ---- working_hours : 192.168.1.100
                                --- save
                                --- apply

                                e2g Realtime
                                ** facebook.com 403 192.168.1.100 working_hours DENIED Blocked site: facebook.com

                                Result success!

                                Another problem is,
                                how does e2g read the groups?
                                top to bottom? bottom to top?

                                Scenario : I want to create another schedule "lunch_break" @ 12noon to 1pm
                                and allow facebook access during that time.
                                I created same steps as above and set IPs to "lunch_break", so one of the IPs belong in two IPs (one in working_hours and same ip in lunch_break)
                                e2g just sticks to "lunch_break" even after the hour ends (1PM)
                                it never go back to "working_hours" IPs and ACL groups.

                                Scenario above can be achieve in e2g?

                                U 1 Reply Last reply Sep 12, 2018, 7:50 AM Reply Quote 0
                                • U
                                  ucribrahim @kenpachizaraki
                                  last edited by Sep 12, 2018, 7:50 AM

                                  @kenpachizaraki From top to bottom. E2guardian ACLs process from top to bottom.

                                  ” Online pfSense Firewall & Router Eğitimi | www.udemy.com/pfsense-training “

                                  K 1 Reply Last reply Sep 12, 2018, 8:10 AM Reply Quote 0
                                  • K
                                    kenpachizaraki @ucribrahim
                                    last edited by Sep 12, 2018, 8:10 AM

                                    @ucribrahim thanks.
                                    How about the IPs? What would happen if same ip belong in both groups?
                                    As my example post above
                                    Working_hours : 192.168.1.100
                                    Lunch_break : 192.168.1.100

                                    My assumption is it would go back to working_groups after 1pm? Since lunch_break is scheduled in my ACL and scheduler setting.

                                    U 1 Reply Last reply Sep 12, 2018, 8:13 AM Reply Quote 0
                                    • U
                                      ucribrahim @kenpachizaraki
                                      last edited by ucribrahim Sep 12, 2018, 8:15 AM Sep 12, 2018, 8:13 AM

                                      @kenpachizaraki Actually It's hard to say something before test it, because I don't know very well how to use E2guardian. I worked so many times with E2guardian but didn't test other menus. You need to test it which acl or group will be come first or what is gonna happen.)

                                      I wrote a blog post about e2guardian in my web site, I'll share a video as soon as fast. After that I'll try to learn how to use other menus and then I'll write blog post how to use other menus in e2guardian. But first video after that i'll do that.

                                      https://lifeoverlinux.com/how-to-block-http-and-https-websites-with-e2guardian/

                                      ” Online pfSense Firewall & Router Eğitimi | www.udemy.com/pfsense-training “

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kenpachizaraki
                                        last edited by Sep 12, 2018, 8:42 AM

                                        @ucribrahim thanks for the guide post.
                                        what I did now is simple solution since I only like to open facebook during lunch.
                                        I created 2 schedule : AM_Working_Hours @ 9:00-12noon
                                        and
                                        PM_Working_Hours @ 1PM-6PM
                                        Created 2 ACL AM_Working_Hours and PM_Working_Hours and assigned the schedule respectively.
                                        selected "Social_media networks" to be blocked. As intended it block the websites during mentioned time.

                                        I only created 1 Group and selected both AM_Working_Hours and PM_Working_Hours.

                                        When time set @ 12noon, social media sites are now accessible.

                                        This is OK for me now as requirements had been achieve.

                                        If you have a cleaner solution would great if you can share.

                                        1 Reply Last reply Reply Quote 0
                                        • K
                                          kenpachizaraki
                                          last edited by Sep 12, 2018, 8:58 AM

                                          btw, squid is disabled in my setup.
                                          im using e2g for the proxy.

                                          https://lifeoverlinux.com/how-to-block-http-and-https-websites-with-e2guardian/

                                          You had mentioned in your forum that it can be bypassed?
                                          that's why you add this line in your squid config.

                                          cache_peer 127.0.0.1 parent 8080 0 login=*:password
                                          always_direct deny all
                                          never_direct allow all
                                          

                                          ill shoot some test later if it can be bypassed.

                                          1 Reply Last reply Reply Quote 0
                                          870 out of 1215
                                          • First post
                                            870/1215
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received